Re: Switch hangs for significant amount of time when using RAND_write_file API with openssl version 1.1.1h and above.

2021-05-06 Thread Dr Paul Dale
My guess would be that OpenSSL is waiting for the system randomness source to properly seed.  This was an intentional change.  Without it security will likely be lost. Paul Dale On 6/5/21 8:34 pm, Sravani Maddukuri via openssl-users wrote: Hi, I have updated the openssl version running on th

RE: How to switch between OpenSSL 1.0.2 and 1.1 in compilation loading and linking a C code.

2021-05-06 Thread Floodeenjr, Thomas
You may need to rename the libraries on your system or use LD_PRELOAD when launching your application. Another option is to specify the full path to the specific libraries you want when you link with, instead of the -l. For example: gcc -I /sonus/p4/ws/shared/cmn_thirdparty.main/openssl/distrib

Re: openssl cms -encrypt error: error setting recipientinfo

2021-05-06 Thread Blumenthal, Uri - 0553 - MITLL
At least one problem I can see with your EC certificate is wrong Key Usage. For EC it should be "Key Agreement". I'd not use the same cert for signing and encrypting. If you do, then add Signature and Non-Repudiation (but I've never done that). -- Regards, Uri There are two ways to design a sy

OpenSSL version 3.0.0-alpha16 published

2021-05-06 Thread OpenSSL
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 OpenSSL version 3.0 alpha 16 released = OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/ OpenSSL 3.0 is currently in alpha. OpenSSL 3.0 alpha 16 has now been made availab

Re: Macro to support 3.0 and 1.0

2021-05-06 Thread Richard Levitte
Before using OPENSSL_VERSION_NUMBER, you should have this line: #include So something like this should make it possible: #include #if (OPENSSL_VERSION_NUMBER >= 0x3000L) /**higher version code/ #include #else /***lo

Macro to support 3.0 and 1.0

2021-05-06 Thread Shivakumar Poojari
Hi All, We are upgrading our code to openssl 3.0. But we need to keep the older version of code also which is 1.0. So, we tried by keeping the newer version of the code as below but when we compiled the code for 3.0, evp.h is not getting included. Please sugge

Switch hangs for significant amount of time when using RAND_write_file API with openssl version 1.1.1h and above.

2021-05-06 Thread Sravani Maddukuri via openssl-users
Hi, I have updated the openssl version running on the switch from 1.1.1g to 1.1.1h and eventually to 1.1.1k. Starting 1.1.1h, I am observing that the switch hangs for a significant amount of time (> 3 minutes) when the call RAND_write_file is invoked from the switch software. The same call (RAND_w